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Abstract. Let E be an elliptic curve over the rationals without complex multiplication. The 
absolute Galois group of Q acts on the group of torsion points of E, and this action can be expressed 
in terms of a Galois representation ps'- Gal(Q/Q) GL2(Z). A renowned theorem of Serre says 
^ — ^ , that the image of ps is open, and hence has finite index, in GL2(Z). We give the first general bounds 

' of this index in terms of basic invariants of E. For example, the index [GL2(Z) : p_B(Gal(Q/Q))] 

, can be bounded by a polynomial function of the logarithmic height of the ji-invariant of E. As an 

■ application of our bounds, we settle an open question on the average of constants arising from the 
' Lang- Trotter conjecture 

m 
(N , 

I— i' 1. Introduction 

■ 1.1. Main theorem. Consider an elliptic curve E defined over Q which has no complex mul- 
tiplication. For each positive integer m, let E[m] be the group of m-torsion points in E{Q); it 
is a free Z/mZ- module of rank 2. The group E[m] has an action by the absolute Galois group 
Gal(Q) := Gal(Q/Q) which, after a choice of basis, can be expressed in terms of a Galois represen- 
tation pE,m- Gal(Q — )■ Aut{E[m]) = GL2(Z/mZ). Combining these representations together, we 
obtain a single Galois representation 

: PE- GalQ ^ Aut(^tors) = GL2(Z) 

\0 ■ 

If^ • which describes the Galois action on all the torsion points of E (where Z is the profinite completion 

\0'. ofZ). 

' A famous theorem of Serre [Ser72] says that pEiGalQ) is open, and hence of finite index, in 

^ ■ GL2(Z). Serre's theorem is qualitative in nature, and it does not give an explicit bound for the 

index. Our main theorem gives such a bound. 

Theorem 1.1. Let E be a non-CM elliptic curve defined over Q. Let Je be the j -invariant of 
E and let h{jE) be its logarithmic height. Let N be the product of primes for which E has bad 
^ I reduction and let uj{N) be the number of distinct prime divisors of N . 

^ \ (i) There are absolute constants C and 7 such that 

[GU{% : PEiG^h)] < C(max{l,/i(j£;)})^. 

(ii) There is an absolute constant C such that 

[GL2(Z) : pEiGalQ)] < c(68iV(l + log log 7V)i/2 

(iii) Assume that the Generalized Riemann Hypothesis holds. Then there is an absolute constant 
C such that 

[GL2(Z) : pE(GalQ)] < (C(logiV)(loglog(2iV))3' 
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These seem to be the first general bounds of Serre's index that hold for all non-CM elliptic curves 
E/Q (Serre and others have computed the index for several examples, and Jones [JonlO] has shown 
that the index is 2 for "most" E/Q). 

1.2. Background and overview. Fix a non-CM elliptic curve E over Q. We first review the 
well-studied "horizontal" situation, that is, we will consider the groups pE/{Ga\Q) C GL2(Z/^Z) 
for a varying prime i. 

Suppose that p^/ is not surjective; its image is contained in some maximal subgroup M of 
GL2(Z/£Z). If £ > 17 and i ^ 37, then PE/iGalQ) is contained in the normalizer of a Cartan 
subgroup but is not contained in any Cartan subgroup (this uses a major theorem of Mazur to rule 
out the case where M is a Borel subgroup) [SerSl, §8.4]. The case where M is the normalizer of a 
split Cartan subgroup has recently been ruled out by Bilu and Parent for all primes i > cq where 
Co is some absolute constant [BPll]. 

Let c{E) S [l,+oo] be the smallest number for which pE/{GalQ) = GL2(Z/^Z) for all primes 
i > c[E). The main task in [Scr72] is to show that c{E) is finite. Serre then asked whether the 
constant c{E) can be bounded independent of E [Ser72, §4.3], and moreover whether we always 
have c{E) < 37 [SerSl, p. 399] (this would be best possible since there are non-CM elliptic curves 
over Q which have a rational isogeny of degree 37 [Vel74]). If c{E) could be bounded independent 
of E, then there would exist an absolute constant C such that [GL2(Z) : pEiGalq)] < C (see 
Remark 5.2). 

Under GRH, Serre proved that c{E) < clog A^(log log 2A^)'^ for some absolute constant c [SerSl] 
(we will discuss his approach in §3). Using a variant of Serre's method, Kraus proved that 
c{E) < 687V(l + loglogiV)^/2 under the now superfluous assumption that E/Q is modular [Kra95]; 
a similar bound was given by Cojocaru [Coj05]. Masser and Wiistholz have proved that c{E) < 
C( max{l, /i(j£;)})'^ where C and 7 are effective absolute constants [MW93] (see §4 for related 
material). The influence of these results on this paper should be apparent from the nature of the 
bounds in Theorem 1.1. 

We now consider the "vertical" situation, that is, we will examine the groups pE/"{GalQ) C 
GL2(Z/^"Z) for a fixed prime i and increasing n. Combining these representations together, we 
obtain an ^-adic representation 

Pe/°o : Galq GL2(Zf). 

In [Ser98, IV-11], Serre proved that the group := pE,e°°{GalQ) is open in GL2(Z£). He accom- 
plishes this by showing that Gg, viewed as an ^-adic Lie group, has the largest possible Lie algebra. 
Unfortunately, this does not give a bound for the index [GL2(Z£) : Gc]. 

Consider a prime i satisfying ^ > 17 and £ ^ 37. From the horizontal setting, we know 
that pE/iGaliq) is either GL2(Z/^Z) or is contained in the normalizer of a Cartan subgroup. If 
PE/iGalq) = GL2(Z/^Z), then one can show that Gi = GL2{1'i); so we will focus on the second 
case. The following key proposition gives constraints on the image of pe/°°', its proof is mainly 
group theoretic and will make up most of §2. 

Proposition 1.2. Let E be an non-CM elliptic curve over Q. Let £ be a prime for which £ > 17 
and £ 7^ 37. Then for every positive integer n, one of the following holds: 

• /OE/"(GalQ) is contained in the normalizer of a Cartan subgroup 0/ GL2(Z/^"Z), 
. pE,i'^{Ga\Q) D I + £4«M2(Zf). 

We are thus led to consider the problem of effectively bounding the primes £ and positive integers 
n for which pE /^(GalQ) is contained in the normalizer of a Cartan subgroup. We will use the 
methods of the papers mentioned in the horizontal setting which dealt with the case n = 1. 
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Finally, to obtain our bound for [GL2(Z) : p£;(Gal(Q)] we will need the following result which we 
will prove in §5. 

Proposition 1.3. Let E he an elliptic curve over Q. Let M he a positive integer with the following 
property: if l is a prime greater than 17 and not 37 and n> 1 is an integer for which pE/"-{GaliQ) 
is contained in the normalizer of a Cartan suhgroup, then divides M . With such an M , there is 
an ahsolute constant C such that [GL2(Z) : pEiGalq)] < CM'^'^. 

For example, in Proposition 3.3(ii) we will prove that there is an M as in Proposition 1.3 

satisfying M < (68A^(1 + loglog A^)^/^)"^^^"*. Theorem l.l(ii) then follows immediately from the 
above proposition. 

Remark 1.4. 

(i) The constants C in Theorem 1.1 are not easily computed because, in the proof of Propo- 
sition 1.3, we have applied Faltings theorem to several modular curves to control the con- 
tribution from the small primes. Besides this our bounds are effective; for example it 
will be clear from the proof that the index [GL2(Z/mZ) : PE,m{GalQ)^ is bounded by 
(687V(1 + loglogiV)^/2)24a;{Ar) positive inte gers m relatively prime to 37J|^<]^7£. 

(ii) Serre's theorem is stated more generally for non-CM elliptic curves E over a number field 
K. We expect Theorem 1.1 (i) to hold for all such E/K except with a constant C now 
depending on the field K. The methods used in the proofs of Theorem 1.1 (ii) and (iii) seem 
unlikely to extend to a general number field K. 

1.3. Lang- Trotter constants on average. We now give a quick application of Theorem 1.1. Fix 
an integer r and let E be an elliptic curve defined over Q. For each prime p of good reduction, we 
obtain an elliptic curve Ep over Fp by reduction modulo p. Let ap{E) be the trace of the Frobenius 
automorphism of Ep/¥p; it is the integer for which |ii^p(Fp)| = p+1 — ap{E). We define TTE^rix) to 
be the number of primes p < x of good reduction for which ap[E) = r. 

For example, if r = 0, then TTEfi{x) counts the number of supersingular primes p < x of E 
(except possibly undercounting at p = 2 and p = 3). When r = 1, the function tte,i{x) counts the 
number of "anomalous" primes of S up to x [Maz72]. For the CM elliptic curve E: Y"^ = — X 
we have ap{E) = ±2 if and only \i p = + 1, so t:e-2{x) + t^e,2{x) counts the number of primes 
p < X that are of the form + 1. The following conjecture of Lang and Trotter [LT76] predicts 
the asymptotics of 'iTE,r{x) as x ^ +oo. 

Conjecture 1.5 (Lang- Trotter). Let E be an elliptic curve over Q and let r be an integer. Except 
for the case where r = and E has complex multiplication, there is an explicit constant Ce.t ^ 
such that 

log X 

as x ^ +00. 

If CE,r = 0, then we interpret the conjecture as simply saying that TTE,rix) is a bounded function 
of x. The constant CE,r, as predicted by Lang and Trotter, is expressed in terms of the image of 
the representation pE- We will describe it for non-CM curves in §6. 

The Lang- Trotter conjecture is open for every pair (E, r) for which Ce^t 7^ 0. Furthermore, there 
are no known examples of E and r ^ for which lim^^—^cxD '^E,r{x) = oo {\i E is non-CM, then E 
has infinitely many supersingular primes by Elkies [Elk87]). 

One source of theoretical evidence for the Lang- Trotter conjecture are "on average" versions of it, 
that is, take the average of the functions T^E,r{x) over a family of elliptic curves E and show that it 
is compatible with what one expects from the Lang- Trotter conjecture. For real numbers A,B > 2, 
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let F{A, B) be the set of pairs (a, b) G with \a\ < A and \b\ < B such that 4a^ + 276^ / 0. For 
each (a, 6) G J-{A,B), let E{a,b) be the elliptic curve over Q defined by the Weierstrass equation 
y'^ = + ax + b. 

Theorem 1.6 (David-Pappalardi [DP99]). Fix e > 0. Let A = A{x) and B = B{x) be functions 
of X > 2 for which A,B> x^"*""^. Then 



as x ^ +00, where 



' ^ ' ^' ia,b)eT{A,B) ^ 



^liV £2; 11 (£_ i)(£2 _!)■ 



So averaging the function TTE,r{x) over the family F{A,B), with ^ and S sufficiently large in 
terms of x, we obtain a quantity with the expected order of magnitude ([DP99] also give a version 
with explicit error terms). Since conjecturally 7rE{a,b),r{x) ~ CE(a,b),rV^/^ogx, it is thus natural 
to ask (as David and Pappalardi did in §2 of [DP99]) whether Cr is the average of the constants 
CE[a,b),r- So that the average is well-defined, we will arbitrarily define Ce,o = when E has complex 
multiplication. In §6, we shall prove the following theorem (building off the work of N. Jones): 

Theorem 1.7. There is an absolute constant 6 > such that 

where the implicit constant depends only on r. 

Thus as long as A and B are not that different in magnitude, the average of the constants 
CE(a.b),r over the pairs (a, 6) € F{A, B) will be well-aproximated by Cr- In particular, 

aS^oo \FiA,A^)\ ^ = 

for any real number /3 > 0. 

Theorem 1.7 is a special case of a theorem of Jones [Jon09] which had the additional hypothesis 
that there exists an absolute constant c such that PE/iGalQ) = GL2(Z/£Z) for all non-CM elliptic 
curves E over Q and primes i > c. This extra assumption is needed by Jones to control the "error 
term" ; the potential problem being that a few elliptic curves with extremely large constants CE,r 
might over contribute in the average. 

We will use Theorem 1.1 (i) to control the constants CE,r- The connection with our result is that 
CE,r < [GL2(Z) : pEiGalo)] ■ Cr for all non-CM elliptic curves E/Q and integers r. 

Acknowledgments. Thanks to David Brown for his helpful comments. 

2. Group theory 

2.1. Cartan subgroups. Fix an odd prime i and let ^ be a free commutative etale Z^-algebra of 
rank 2. Up to isomorphism, there are two such algebras; we will say that A is split or non-split if 
A/iA is isomorphic to x or ¥p, respectively. The algebra A has a unique automorphism a 
of order 2 which induces the natural involution on A/iA. 

The algebra A acts on itself by (left) multiplication, so a choice of Z^-basis for A gives an 
embedding l: A ^ Endz^(^) M2{Zi) of Z^-algebras. Denote the image of l by R. For a 
positive integer n, the subgroup C{i"') = {R/P^R)^ of GL2(Z/£"Z) is called a Cartan subgroup of 



GL2(Z/£"Z). Up to conjugation in GL2(Z/^'^Z), there are two kinds of Cartan subgroups; C(^") 
is split or non-split if R is split or non-split, respectively. The Cartan subgroup C{P^) is its own 
centrahzer in GL2(Z/rZ). We will denote the normalizer of C(r) in GL2(Z/rZ) by C+(r); the 
index of C{P^) in C"^(£") is 2 and i{a) is a representative of the non-identity coset of C'^{i'^)/C{i'^). 

More concretely, the group {(g g) : a,& G {Z/TZy} is a split Cartan subgroup of GL2(Z/rZ) 
and the matrix (5o) lies in its normalizer. With a fixed non-square e G (Z/i"'Z)^, the group 
{{b^a) ■a,be Z/rZ, {a,b) ^ (0,0) (mod £)} is a non-split Cartan subgroup of GL2(Z/rZ) and 
the matrix ( o -?i ) lies in its normalizer. 

Lemma 2.1. Let a be an element of Gh2{Zi) for which tr(a)^ — 4det(a) ^ (mod £), and let R 
be the Z^-subalgebra of M2{Z() generated by a. Take any integer n > 1 and let a be the image of 
a in GL2(Z/rZ). 

(i) The ring R is a free commutative etale Z^-algebra of rank 2. 

(ii) The centrahzer of a in GL2(Z/rZ) is the Cartan subgroup C{r) = {R/TRY. 

(iii) // g is an element of GL2(Z/£"Z) for which gag~^ belongs to C{i^), then g belongs to 

c+{r). 

(iv) Let H be a cyclic subgroup of GL2(Z/^"Z) generated by a matrix of the form h = L + tA 
with 1 < i < n. Suppose that H is stable under conjugation by a and that A (mod i) is a 
non-zero element of R/iR. Then H C C{P^). 

(v) Suppose that the image of B G C{1) in PGL2(Z/i?Z) has order greater than 2, then tr(S)^ — 
4det(5) / and ii{B) / 0. 

Proof, (i) We claim that {/, q} is a basis of i? as a Z^-module; it is generated by {/, a} by the 
Cayley-Hamilton theorem, so it suffices to show that they are linearly independent. Suppose that 
a/ + 6q = with a, 6 € Z^ not both zero. By dividing by an appropriate power of we may assume 
that a or 6 is non-zero modulo i. Reducing modulo we find that a (mod t) must be a scalar 
matrix which contradicts our assumption that tr(a)^ — 4det(a) ^ (mod £). That R is an etale 
Z^-algebra follows from tr(a)^ — 4det(a) G Z^. 

(ii)-(ih) Fix an element m G C+(r) - C(r). Since iv{af - 4det(a) G (Z/^Z)^ and £ is odd, one 
finds that there are exactly two roots of the polynomial — iv{a)x -\- det(a) in R/£^R; they are 
a and m~^am. If gag~^ = a, then g commutes with C{£) = {R/£^'R)^ and hence g G C(£"). If 
gag~^ = m~^am, then mg commutes with C(^") and hence g G C''~(£"). 

(iv) The group H is cyclic of order Since aha~^ is also a generator of H, there is a unique 
m G (Z/£"~*Z)^ for which aha~^ = /i™. We have aAa~^ = A (mod i) since by assumption A 
(mod £) lies in R/£R. Therefore, 

I + fA = aha-^ = h"^ = I + tmA (mod f +^) 

and so m = 1 (mod £) since A (mod £) is non-zero. Conjugation by a thus gives a group automor- 
phism of H with order dividing and hence /? := a^" ' commutes with H. The order of a 
(mod £) is relatively prime to £, so tr(/3)^ — 4det(/3) ^ (mod £). Using part (ii), the centrahzer 
of /3 in GL2(Z/^"Z) is a Cartan subgroup that contains C{£"') (the centrahzer of a) thus C(£") is 
the centrahzer of /3. Therefore, H C C{£^). 

(v) That B belongs to C{£) implies that it is diagonalizable in GL2(F^). It is then easy to show 
that B^ is a scalar matrix (equivalently, the image of B in PGL2(F£) has order 1 or 2) if and only 
if tr(5)2 - 4 det{B) = or tv{B) = 0. □ 

2.2. Congruence filtration. Fix a prime £ and a closed subgroup G of GL2(Z£). [We will even- 
tually consider G = pE.e°°{GalQ) for a non-CM elliptic curve E/Q.] For each positive integer n, let 
G{i'^) be the image of G under the reduction modulo homomorphism GL2(Z^) — t- GL2(Z/£"'Z). 
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For each n > 1, we let G„ be the subgroup consisting of those A £ G for which A = I (mod i'^). 
The groups G„ are normal closed subgroups of G and form a fundamental system of neighbourhoods 
of 1 in G. 

Let (F^) be the additive group M2{¥i) and let 5(2 (F^) be the subgroup of trace matrices; 
they are Lie algebras over F^ when equipped with the usual pairing [A, B] = AB — BA. For each 
n > 1, we have an injective group homomorphism 

G„/G„+i 0[2(F^), I + tB^Bmodl 

whose image we will denote by Qn- From the groups Qn and G{1), we can recover the cardinality of 
each G{t), though not necessarily the group. Indeed, for each i > 1 we have |G(^*"'""'^)| = |G(£*)||0j|, 
so \G{e')\ = |G(^)inn=\ Iflr^l- If det(G„) C 1 + l^'+^Zf, then 0„ C s[2(Ff). In particular, if 
det(G) = 1, then 0„ C s[2(F£) for ah n>l. 

Let [G, G] be the commutator subgroup of G, that is, the smallest closed normal subgroup of G 
whose quotient group is abelian. 

Lemma 2.2. Fix an integer n > 1 (assume that n >2 if i = 2). 
(i) Qn Q Qn+l- 

(ii) IfQn = Qhi^e), then G^I + P'Ahi'Lt). 

(iii) //det(G) = 1 and 0„ = shi^i), then G D {A G SL2(Z^) ■.A = I (mod r)}. 

(iv) If Qn = 02ni then g„ is a Lie subalgebra of q12(¥£). 

(v) Let e = or 1 ifi is odd or even, respectively. Suppose that G{£'^~^^~^'^) 5 {A G SL2(Z/-^"'"'"^"'''^Z) : 
A = I (mod r)}, then [G, G] contains {A G SL2(Z^) : A = I (mod ^2"+^)}. 

Proof (i) Take any B £ 0„. There exists an A G Ahi^e) such that A = B (mod i) and I+rA G G. 
Taking the ^-th power of / + i'^A we find that 

(/ + r^)^ = / + + Q ^2n^2 (^Q^ ^3ny 

When i is odd, we have (I + i'^AY = I + i^+^A (mod ^"+2) and hence B = A (mod i) belongs to 
0„+i (when £ = 2 we need n > 2 to guarantee that (/ + ^AY = I + (mod 

(ii) We always have an inclusion 0^ C 0(2 (F^), so by part (i) and our assumption on 0„ we deduce 
that Qi = 0l2(F£) for all i > n. So for ah i > n, we have \G{e)\ = |G(r)|^4(*-"). Since G is a closed 
subgroup of GL2{Z,i), this is equivalent to G containing the group / + £"M2(Z£). 

(iii) The proof is similar to (ii), one shows that |G(^*)| = \G{£^)\£^^^~'^'^ for all i > n. 

(iv) Take any Bi,B2 G Qn- There are Ai G M2{Zi) such that Ai = Bi (mod £) and gi := I + £'^Ai 
belongs to G. The commutator gig2gi^ 92^ belongs to [G, G] C G and equals 

(/ + rAi)(/ + r A2)(/ + r^i)-^/ + r^2)"' 
=((/ + r A2)(/ + r^i) + ^'"(^1^2 - ^2^1)) (/ + r Ai)-^(/ + r ^2)-' 
=/ + £^''{A,A2 - A2A,){I + r^i)-i(/ + rA2)-i 

=1 + £^''{AiA2 - A2A1) (mod ^=^"). 

Therefore, [Bi, B2] = B1B2 — B2B1 = A1A2 — A2A1 (mod £) is an element of 02n- Since 0„ = 02n 
by assumption, we deduce that 0„ is closed under the Lie bracket [•,•]. 

(v) Set S := [G, G] and let {Sj}i>i be the filtration of S; each space s„ is contained in s[2(F^). We 
claim that 52n+e = s[2(F£). Once this is known, we can deduce the desired result from (iii). 

Define integral matrices = ( g ^ ), ^2 = ( ? ) and -83 = ( J ) . We have det(/ + i'^B,) = 1 
(mod £'^~^^~^'^), so by assumption there is a gi € Gn such that gi = I + £^Bi (mod i^'^^^'^). From 
the commutator calculations above, the matrix h := gigjg^^gj^ belongs to [G, G] n (/ + £2"M2(Z^)) 
and h = I + £'^'^[Bi, Bj] (mod £2^+1+'=). Observe that [Si, -B2] = B3, [B2, B3] = 2B2 and [B3, Bi] = 
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2Bi. The matrices 2Bi, 2B2 and modulo i are thus in S2n and they generate s[2(F£) if i is 
odd. Therefore, 52n = shiWi) for i odd. Now consider i = 2. The group [G(£2"+2), G(£2"+2)] 
contains / + f''2Bi = I + f'^+^Bi (mod I + e''2B2 = I + f''+^B2 (mod £^"+2) and 

(/ + £2"53)^ = / + ^2n+i^^ (j^qJ £2n+2)_ Therefore, Si, and ^3 modulo £ belong to 52n+i and 
hence S2n+i = sl2(F£). □ 

2.3. Group theory for Proposition 1.2. Let G be a closed subgroup of GL2(Z^) where I is 
an odd prime, and we keep the notation from §2.2. We now impose the following additional 
assumptions on G, which will hold for the rest of this section: 

• det(G) = Z"^, 

• G{tj C GL2(Z/^Z) is contained in the normalizer of a Cartan subgroup, but is not contained 
in any Cartan subgroup, 

• the image of G{t) in PGL2(Z/ffl) contains an element with order at least 5. 
The goal of this section is to prove the following: 

Proposition 2.3. For G as above, for each n > 1, one of the following properties hold: 

• G{i^) is contained in the normalizer of a Cartan subgroup, 

• G D / + M2(Z£). 

Let C{e) be a Cartan subgroup of GL2(Z/ffl) such that G{e) C C+(^). Using [G+{£) : C{£)] = 2 
and our assumption that G{i) contains an element of order at least 5, we deduce from Lemma 2.1(v) 
that there exists an a G G such that a (mod i) belongs to C{i), tr(a)^ — 4det(a) ^ (mod £) and 
tr(a) ^ (mod i). 

Let R be the Z^-subalgebra of M2(Z^) generated by a, and for each n > 1 define G{i'^) = 
{R/P^R)^ . By Lemma 2.1, i? is a free commutative etale Z^-algebra of rank 2 and G{P^) is the 
unique Cartan subgroup of GL2(Z/£"'Z) containing a. (in particular, our two Cartan subgroups 
C{£) are the same). 

The group G acts on each Gn by conjugation, and hence also acts on the quotient group Gn/Gn+i 
with the subgroup Gi acting trivially. Therefore, 0„ C g[2(F^) is stable under conjugation by 
G{tj = G/Gi. To figure out the possibilities for g.„, we will first decompose Q[2{^t) into irreducible 
F£[G(^)]-modules (the representation theory is straightforward since l\ \G{1)\). 

Lemma 2.4. 

(i) As an ¥ ([G{iy\-module, with G{t} acting by conjugation, 0[2(F^) equals Vi (BV2® V3 for 
non-isomorphic irreducible ¥ ([G{()\-modules Vi. They can be ordered so that Vi = F^ • /, 
^2 = {A G R/m : tT{A) = 0} and dimp, V3 = 2. 

(ii) The space V3 in (i) is not a Lie subalgebra o/g[2(F£). 

(iii) The group s[2(F^) is generated by the set {gBg~^ — B : g £ G(£), B G g[2(F^)}. 

Proof, (i) It is easy to check that the Vi and V2 as given in the last line are stable under conjugation 
by G+(£), and hence also by G(£), and thus Ql2(Fg) = Fi© V2®V3 for some 2-dimensional represen- 
tation V3. The G(£)-action on Vi is trivial while the action on V2 is non-trivial (since each element 
of G+(^) - C{i) acts as -/ on V2, and by assumption we have G(£) C C+{£) and G{i) g C{£)). 

It remains to show that V3 is an irreducible F£[G(^)]-module. Conjugation gives a faithful action 
of G{i)/G{i)ri¥^ on g[2(F^). Since Vi and V2 are one dimensional, to prove that V3 is an irreducible 
F£[G(£)]-module, it suffices to show that the group G{i)/G{i) n F^ is non-abelian. 

Let a be the image of a in G{i) and let m be an element in G{£) — G{i). If the cosets of m 
and a in G{i)/G{£) H F^ commuted, then mam~^a~^ = C for some C G F^. We have C 7^ 1) since 
m C{i) and C{i) is the centralizer of a by Lemma 2.1(ii). So a and mam~^ = C,a are the two 
distinct roots of — tr(a)x-|-det(a) in RjlR. Therefore, x^ — tr(a)a;-|-det(a) = {x — (y){x — Cfii) and 
hence tr(a) = (1-|-C)a. Since tr(a) G F^ is non-zero by our choice of a, we deduce that a is a scalar 
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matrix. However, this contradicts tr(a)^ — 4det(a) ^ 0. So as desired, the group G{€}/G{€) R 
is non-abehan. 

(ii) First suppose that R is spht. After conjugating R/iR by an element of GL2(Z/£Z), we may 
assume that R = {{'^t)}. We then have V3 = F, ( [] ^ ) © F, ( ? [] ), but [ ( j] J ) , ( ? g ) ] = {h -1) 
does not belong to V3. Now suppose that R is non-split. After conjugating R/iR by an element 
of GL2(Z/£Z), we may assume that R = {{1^^)} where e G (Z/£Z)^ is a fixed non-square. Then 
F3 = F, (1 ©F, 5), but [ (J , §)]=(? ^) does not belong to V3. 

(iii) Let W be the subspace of s[2(F^) generated by the set {gBg~^ - B : g e G{£), B G ^{2(^1)]] 
each element of the set does indeed have trace 0. The space W is stable under conjugation by 

so by (i) we find that W is either 0, V2 5 V3 or V2 © V3. It thus suffices to show that W contain 
non-zero elements from V2 and V3. Fix i G {2,3}. Since Vi has a non-trivial G(^)-action, there are 
V ^ Vi and g G G{1) such that gvg^^ ^ v. Therefore, gvg~^ — f is a non-zero element of W that 
belongs to Vi. □ 

Define the closed subgroup S = G (1 SL2(Z£) of G. For each n > 1, we let iS^ = G„ n SL2(Z£). 
We denote the image of the injective homomorphism 

(2.1) 0[2(F^), l + rB ^ B mode 

by s„, it is a subgroup of s[2(F^). 

Lemma 2.5. With notation as above, tr(g„) = F^ and Sn = Qn ns[2(F^) for all n > 1. 

Proof. First of all, we claim that det(G,i) = 1 + for all n > 1. It suffices to show that there 
exists a (7 G Gi with det{g) ^ 1 (mod since then 5^" G G„ and one can then show that 
det((7^" ) generates 1 + £"'Z£ as a topological group. Since det(G) = Z^, there exists a g £ G such 
that det{g) = 1 (mod i) and det(5') ^ 1 (mod Since I f |G(£)|, replacing g by ^fl'^WI, we have 
g = I (mod and dei{g) ^ 1 (mod l"^) as desired. 

For an element g G G„ of the form g = I + i^A, the condition that det{g) ^ 1 (mod is 
equivalent to tr(^) ^ (mod ^). So det(G„) = 1 + ^"Z^ imphes that tr(0„) = F^. 

We certainly have 5„ ^ 0n H 5l2(F£), so we need only prove the other inclusion. Take any 
-B G 0n with trace 0, and pick an A such that / + i"'A G G with A = B (mod £). We have 
det(I + i'^A) = 1 (mod ^"+-^) since tr(74) = (mod i), so there exists an element g G Gn+i such 
that det(g') = det(/ + I'^A). The matrix s := g~^{I + P^A) has determinant 1, and hence belongs 
to S. It satisfies .s = I + ^A (mod so B = A (mod belongs to s„. □ 

Proof of Proposition 2. 3. 
Case 1: dimp^ g„ = 4. 

We have 0„ = Qi2^d^ so G contains the group 1 + i^M2{Iji) by Lemma 2.2(ii). 
Case 2: dimp^ 0n. = 3. 

If dim^^ 02n = 4, then Case 1 shows that G contains the group 1 + £^"M2(Z£). So we may 
assume that dim^^, 02n = 3 and hence 0„ = 02n- Since 0„ has dimension 3 over F^, is stable under 
conjugation by G{i) and satisfies tr(0„) = F^, we deduce from Lemma 2.4(i) that 0n = F^ (q °)©V3. 
We thus have s„ = V3 which is not a Lie subalgebra of 0[2(F^) by Lemma 2.4(ii). However, 0„ = 02n 
and Lemma 2.2(iv) implies that 0„, and hence also s„ = 0nn0[2(F£), is a Lie subalgebra of Ql2(^e)- 
This is a contradiction, so we cannot have dim^^ 02n = 3. 
Case 3: dimp^ 0n = 2. 

If dimpf 02n equals 3 or 4, then Cases 1 and 2 above show that G contains the group H-£^"'M2(Z^). 
So assume that dimp^ 02n = 2. 

Let S'(^2n^j ^i^g -^g^gg g ^j^^g^ ^j^g reduction modulo f"" map SL2(Z^) ^ SL2(Z/£2«Z). 
Let be the subgroup of S'(£^") consisting of those matrices congruence to / modulo i^. Since 
dimiF^ 0„ = dimiF^ 02n = 2, we deduce from Lemma 2.5 and Lemma 2.2(i) that dimip^Si = 1 for 
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n < i < 2n. There exists an element h G S{l'^^) of the form / + P^A with A mod C. non-zero. By 
cardinality considerations, the group H is generated by h. The group H is normalized by 

Using s„ C s[2(F£), dimiF^Sn = 1, and Lemma 2.4(i), we find that there is only one possibility 
for s„,, i.e., s„ = {5 G R/IR : tr(S) = 0}. Since A (mod £) belongs to R/iR, we have C C(£2n) 
by Lemma 2.1(iv). We then have 

= {a G C(£2") : det(a) = 1 (mod ^^n^ ^^^^ ^ ^ j (mod T)}; 

the inclusion "C" is now clear and both groups have cardinality The group G(^^") normalizes 
H, hence it also normahzes H' := {a G C(£2") : a = I (mod = I + T R/f'^R (the group i?' 
is obtained from H by including scalar matrices that are congruent to the identity modulo ^"). 

Now take any g £ G. For any a £ R, we have just shown that there exists an element b £ R such 
that g{I + t'a)g~^ = I + P^h (mod and hence gag"^ = b (mod Therefore, 5 (mod 
normahzes and thus belongs to C+(r). We conclude that G{r) C C+(r). 

Case 4: dimp^ g„, = 1. 

By Lemma 2.5 and Lemma 2.4, we have gi = ••• = Qn = F£(q5). Let H be the subgroup 
of G{t^) consisting of those matrices that are congruent to / modulo L There exists an element 
h £ H of the form / + iA for which A = I (mod i). By cardinality considerations, the group H is 
generated by h. The group H is stable under conjugation by G{£"). Therefore by Lemma 2.1(iv), 
we have H C C(r). 

Let W be the group of g £ G{i"-) for which g (mod i) £ C{£), it is an index 2 subgroup of G {£"•). 
Take any g £ W. Since a (mod i) and g (mod i) commute, the commutator gag~^a~^ (mod 
belongs to H CI C{£^) and hence gag~^ (mod £^) is an element of C{£^). By Lemma 2.1(iii), 
this implies that g is an element of C"*" (£"■). Since g was arbitrary, we have W C C"'"(^"') and by 
considering its image modulo £ we must have W C C{£^). Finally, the group W C C(^") contains 
a and is normalized by G(£"), thus G(r) C C+(£") by Lemma 2.1(iii). □ 

2.4. Proof of Proposition 1.2. We will apply Proposition 2.3 with the group G := PE/'^{GalQ) 
contained in GL2{Zi). The representation detop^^oo: GalQ — )• is the £-adic cyclotomic char- 
acter, and hence is surjective. Therefore, det(G) = Z^. If G{i) = pE/iGalq) equals GL2(Z/£Z), 
then G = GL2{'Ze) by [SerSl, Lemme 15] and the result is immediate for all n. So assume that 
G{£) / GL2(Z/£Z), and hence by our restriction to ^ > 17 and £ 7^ 37, the group G{£) lies in the 
normalizer of some Cartan subgroup of GL2(Z/£Z) but is not contained in any Cartan subgroup 
[SerSl, Lemme 16-18]. The image of G{£) in PGL2(Z/£Z) contains an element of order greater 
than 5 by [SerSl, Lemme 18'] and our assumption £ > 17. 

We have verified that our G satisfies the assumptions of Proposition 2.3, so for each n > 1 the 
group G{£'^) = pE^e^iGalq) is contained in the normalizer of a non-split Cartan subgroup or G 
contains I + £^"M2(Z^). This completes the proof of Proposition 1.2. 

To obtain better bounds, we will use the following lemma with Proposition 1.2. 

Lemma 2.6. Let E be a non-CM elliptic curve over Q and let £ be a prime greater than 17 and 
not equal to 37. If pE,e^ (Galq) D I + £'''M2{Ze), then P£;,^-(Gal(Q/Q=y=)) ^ {A £ SL2(Z£) : A = I 
(mod ^")} where Q^^^ is the cyclotomic extension of Q. 

Proof. Define G := pE /°°{Gai(Q); as noted above, G satisfies the conditions of §2.3. Since Q^^^ is 
the maximal abelian extension of Q, we have [G, G] = pE/^^iGal^Q/Q^^^)). Define S := [G, G] C 
SL2(Z£) and for each n > 1, define Sn and s„ as done at (2.1). The commutator map G x G„ — )• 5„, 
{g, I + £'^A) ^ g{I + £'^A)g-'^{I + rA)"^ induces a function 

/: G(£) X0„^s„, {g,B)^gBg-^-B. 
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Our hypothesis on the image of pe/°° impHes that Qn = 0^2(^^^)• Lemma 2.4(iii) imphes that 
s„ = 5l2{¥i) and hence S ^ {A £ SL2(Z^) : A = I (mod by Lemma 2.2(iii). □ 

3. Quadratic characters arising from non-surjective pE^e 

Let E he a non-CM elhptic curve defined over Q. Let be the product of primes p for which E 
has bad reduction and let uj{N) be the number of distinct prime factors of N. We now follow an 
approach used by Serre [SerSl, §8.4], and then by Kraus [Kra95] and Cojocaru [Coj05]. 

Let i he a prime satisfying i > 17 and i ^ 37 for which pE/iGalq) / GL2(Z/^Z). By [SerSl, 
Lemmas 16-18], pE/{GalQ) is contained in the normalizer of some Cartan subgroup C{£) but is 
not contained in any Cartan subgroup. We can thus define a non-trivial character 

ee: GalQ ^ C+{£)/Cii) ^ {±1}. 

By [Ser72, p. 317], ee is unramified at all primes p \ N (and hence there are only finitely many 
possibilities for eg). We shall identify eg with a Dirichlet character. 

For each prime p ] N, let Ep he the reduction of E modulo p and let ap[E) be the integer 
satisfying |ii^p(Fp)| = p + 1 — ap{E). Hasse showed that \ap{E)\ < 2y/p. 

Lemma 3.1. Let i be a prime as above and n a positive integer such that pE^i^{GalQ) is contained 
in the normalizer of a Cartan subgroup. If p \ N is a prime for which ei{p) = — 1, then ap{E) = 
(mod r). 

Proof. By assumption there is a Cartan subgroup C{i^) of GL2(Z/^"'Z) such that pE/ri{Ga\Q) C 
C^{i^). The representation 

GaiQ c+{r)/c{r) ^ {±1} 

agrees with e^. If p f Nl, then the representation pei-^ is unramified at p. The condition £(,{p) = — 1 
means that pE,g^{^rohp) C C+{r)-C{r). We have ti{A) = (mod r) for all A G C+(r)-C(r) 
(this can be checked directly from the explicit description of Cartan subgroups in §2.1). Therefore, 
ap{E) = tr(p£;,£n(Frobp)) = (mod P"). 

Now suppose that p = £. By [Ser72, p. 315 (cs)], we have ae{E) = (mod £), so ai{E) = by 
the Hasse bound (this uses £ > 5). □ 

Take a prime power £^ as in Lemma 3.1 and suppose that p^ N is a prime for which ee{p) = — 1 
and ap{E) / 0. Then £'^ divides ap{E), and hence < 2y/p by Basse's bound. So to bound it 
suffices to effectively choose such a prime p. 

Lemma 3.2. Let e be a non-trivial quadratic Dirichlet character whose conductor divides N lcm(A^, 2) . 

(i) Assuming the Generalized Riemann Hypothesis ( GRH), there exists an absolute constant c 
and a prime p \ N with 

p < c(logiV)2(loglog(2iV))^ 

such that £{p) = — 1 and ap{E) ^ 0. 

(ii) There exists a prime p \ N with 

p< 1152 •iV2(l + log log iV) 
such that e{p) = — 1 and ap{E) ^ 0. 

Proof. For part (i) see the proof of [SerSl, Lemme 19] (the proof uses e = eg but only needs our 
assumption on the conductor of e). It uses an effective version of the Chebotarev density theorem. 

We now prove (ii) using the argument in [Kra95]. Let E2 be the elliptic curve defined over Q 
obtained by twisting Ei := E by the character e. From our assumption on e, the curve E2 has 

10 



good reduction at all primes p\ N. For each N, we have ap{E2) = e{p)ap{Ei). Thus for p\ N, 
the condition e{p) = —1 and ap{E) 7^ is equivalent to having ap{Ei) / ap{E2). 

Let Ni be the conductor of Ei and define N'^ = Ni Wp\j>4 p'^^^^\ where di{p) = 0, 1 or 2 if Ei has 
good, multiplicative or additive reduction, respectively, at p. Let M be the least common multiple 
of N[ and N'2. By [Del85, §5 C], there exists a prime p \ N satisfying p < ^- ■ JlpiAf + \) ^'^'^ 
ap{Ei) 7^ Op (£'2) (this last step uses that Ei and E2 are modular [BCDT]). 

The integer M has the same prime factors as N and it divides 2^3"^ A^^, so the above prime p is 
at most 288 • iV^ y\^^^ (l + |)- The final bound follows by using Hpiiv (l + |) < 4(1 + log log iV) 
[Kra95, Lemme 2]. □ 

Consider the case n = 1. If pE/{GaliQ) 7^ GL2(Z/^Z), then by Lemma 3.2(ii) there is a prime 
p < 1152 • N^{1 + log log A^) such that ei{p) = -1 and ap{E) 7^ 0. The prime i divides ap{E) by 
Lemma 3.1, so by the Hasse bound we have 

i < \ap{E)\ < 2^< 2(1152 • iV2(l + log log iV)) < 68A^(1 + log log iV)^/^^ 

Therefore pE/ is surjective for all £ > 68A^(1 + log log A^)"*^/^, which is the main result of [Kra95]. 

We now consider higher powers of n while keeping track of divisibilities. Cojocaru [Coj05] handles 
several primes in bounding the product of primes of i for which p^/ is not surjective. 

Proposition 3.3. Let E be a non-CM elliptic curve over Q. Let N be the product of the primes p 
for which E has bad reduction. 

(i) Assuming GRH, there is an absolute constant c and a positive integer 

M< c(logiV)(loglog(2iV))2 



such that if pE/"{GalQ) is contained in the normalizer of a Cartan subgroup with £ > 17 
and I ^ 37, then ^" divides M. 
(ii) There is a positive integer 

M< (68iV(l + loglogAf)i/2 



such that if pE/"{GalQ) is contained in the normalizer of a Cartan subgroup with i > 17 
and i ^ 37, then divides M. 

Proof. If N is odd, define A'^o = A^, otherwise define A'o = 2A^. Let Vi be the group of characters 
{'L/Nq'L)'^ —7- {±1}, which we may view as a vector space of dimension uj{N) over F2. 

We will define a sequence of primes , . . . , Puj{N) ^^sX are relatively prime to A^ such that a^. {E) 7^ 
for all i and that for every non-trivial character a € Vi, we have Oi{pi) = —1 for some i € 
{1.., ti;(A^)}. We proceed inductively on i = 1, . . . ,u){N). Choose a non-trivial character a, G Vi. 
Assuming GRH, Lemma 3.2(i) says there is a prime Pi\ N satisfying 

(3.1) pi<c{\ogN)\loglog{2N)f 

such that ai{pi) = —1 and ap-{E) 7^ 0. Let Vi+i be the subspace of Vi consisting of those characters 
e for which e{pi) = 1. The space V^+i has dimension a;(A^) — i over F2. Since V^(^^-j^i = 1, our 
sequence of primes pi, ■ ■ ■ ,Puj{n) lias the desired property. 
Define the positive integer 

uj{N) 

M=ll K{E)\. 

1=1 

Consider i and n as in the statement of the lemma. We may view ££ as a Dirichlet character 
(Z/NqZ)^ —7- {±1}. Since ££ is non-trivial, there is some i G {1, . . . ,u}{N)} such that se{pi) = —1. 
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By Lemma 3.1, we have ap^{E) = (mod ^"), and hence l"^ divides M. It remains to bound M. 
Using Hasse's bound and (3.1), we obtain 



M <W 2(c{\ogNf{\og\og{2N)fy'^ = {2c^/'^{\ogN){\og\og{2N)f) 



1=1 

This completes the proof of (i). 

Part (ii) is proved in the exact same way as (i) except that Lemma 3.2(ii) is used to choose the 
primes pi, . . . ,Puj{N)- We then have an appropriate M with 

M< JJ 2(^1152 •Af2(i + log log Ar)^^^ < (^68A^(1 + loglogiV)^/^^''^^^ □ 

i=l 

Remark 3.4. Let A(E) be the product of the primes I for which p^/ is not surjective. By Propo- 
sition 3.3(ii), we have 

A{E) < (37 Yl ^) • (68A^(1 + loglogAf)i/2^'^^^^ 
e<i7 

Theorem 2 of [Coj05] claims that A{E) < iV'(loglog A^')^''^ where N' is the conductor of E, but 
there seems to be a gap in the proof. If £ is a prime greater than 17 and not 37 for which pE/ is 
not surjective, then one can use Lemma 3.2(ii), or something similar, to choose a small prime p \ N 
for which ap{E) ^ and e£{p) = —1. However, it is not clear why this particular choice of p should 
work for all such i. To make our proof work, we needed to choose at least lj{N) different primes 
Pi, which is why our bound is essentially the a;(A^)-th power of that in [Coj05]. 

4. MASSER and WiiSTHOLZ APPROACH 

Let E' be a non-CM elliptic curve defined over Q. Masser and Wiistholz have shown that 
PE,e{GalQ) = GL2(Z/^Z) for all £ > c[max{l,h{jE)})"' where c and 7 are absolute constants 
[MW93]; they actually prove an analogous results for elliptic curves over an arbitrary number field, 
but we will continue our focus on curves over Q. This theorem was later refined by Masser in 
[Mas98, Theorem 3] where he proved the following: there are absolute constants c and 7 and a 
positive integer M < c( max{l, h{jE)}y such that pE/iGalq) = GL2(Z/tt) for ah i f M. 

The main tool of Masser and Wiistholz is an effective bound of the minimal possible degree of an 
isogeny between two isogenous abelian varieties. We will use the following variant [Mas98, p. 190 
Theorem D]. For a principally polarized abelian variety A over a number field, let h{A) denote its 
(absolute, logarithmic, semistable) Fallings height. 

Theorem 4.1. Let r and D he positive integers. Then there are constants c and k, depending 
only on r and D, with the following property. Suppose that A is a principally polarized abelian 
variety of dimension r defined over a number field k. Suppose further that A is isomorphic over k 
to a product Al^ x • • • x Al^ , where A\, . . . , At are simple, mutually non-isogenous, and have trivial 
endomorphism rings. Then there is a positive integer 

b{k,A,D) < c(max{[A; : q],h{A)})^ 

such that if A* is an abelian variety, defined over an extension K of k of relative degree at most D, 
that is isogenous over K to A, then there is an isogeny over K from A* to A whose degree divides 
b{k,A,D). 

Our application of this theorem is the following. The proof is the same as [MW93, Lemma 3.2] 
except using the above refined theorem and considering higher prime powers. 
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Proposition 4.2. There are absolute constants c and k with the following property. Suppose that 
E is a non-CM elliptic curve defined over Q. Then there is a positive integer 

M<c(max{l,/i(is)})" 

such that if pE/-n{GalQ) is contained in the normalizer of a Cartan subgroup with i > 7, then i"" 
divides M . 

Proof. Suppose that £ > 7 is a prime for which /9_E,^i(GalQ) is contained in the normahzer of a 
Cartan subgroup. There is a quadratic extension of Q such that pE/^{Gdl{<Q^/ K)) is contained in 
a Cartan subgroup of GL2(Z/£"Z). By [SerSl, Lemme 18'], the image of pE,i{GalQ) in PGL2(Z/^Z) 
contains an element of order at least (£— l)/4, and in particular of order greater than 1 since £ > 7. 
Therefore, /OE,^"(Gal(Q/Er)) contains an element a for which a (mod t) is not a scalar matrix. 

Let r be the subgroup oi A := E E consisting of pairs of points with x G £'[£"]. The 

group r is defined over K, since an arbitrary cr G Gal(Q/K) takes {x.,ax) to {pE,t^{(y)x, pE/ri{a)ax), 
which is (y, ay) for y = pE/^{o)x (we have used that pE/^{Ga\.{Q/ K)) is commutative). Therefore, 
the abelian variety A* := A/T and the natural isogeny ijj: A ^ A* are both defined over K. By 
Theorem 4.1, there is an isogeny (p: A* ^ A defined over K whose degree divides b{Q_,E x E,2). 
The composition e := (j) o ip is an endomorphism of A = E x E. Since E is non-CM, there are 
integers a,b,c,d £ Z such that e{x, y) = {ax + by, cx + dy). Since F C ker(e), we have ax + bax = 
and cx + dax for all x S Equivalently, a + ba = Q and c + da = (mod Since a (mod tj 

is non-scalar, we deduce that divides o, 6, c and d. Therefore, divides dege = {ad — bc^. 
Since degi;^ = |r| = and dege = degp • degijj, we find that divides degV' and hence also 
b{Q,ExE,2). 

So we shall take M = b{<Q,E x E,2), and it remain to prove that M has the desired upper 
bound. Since 6(Q, E x E,2) < c(max{l, h{E x E)})'^ for absolute constants c and k, it suffices to 
note that h{E x E) = 2h{E) and that h{E) < max{l, /i(j£;)} [Sil86, Proposition 2.1]. □ 

5. Proof of Proposition 1.3 and Theorem 1.1 

We first prove the following lemma to deal with the small primes. 

Lemma 5.1. For each prime £, there is an integer e{i) > 1, depending only on i, such that 
PE,e°°{Ga\{Q/Q''y'')) contains the group {A G SL2(Z^) : A = I (mod for all non-CM elliptic 

curves E over Q. 

Proof. Fix a prime i. For each subgroup H of GL2(Z/^"Z) with det{H) = (Z/£"Z)^, we can define 
a modular curve Xh over Q, which comes with a morphism vr: Xh — )• Pq to the j-line [DR73, IV-3]. 
If E is an elliptic curve over Q with pE,e"{GalQ) C GL2(Z/^"Z) conjugate to a subgroup of H, then 
there is a rational point P € Xh{Q) such that vr(P) equals the j-invariant of E. 

Let Tfj be the congruence subgroup of SL2(Z) consisting of those A G SL2(Z) for which A modulo 
belongs to H. The genus of Xh is equal to the genus of Th (which is the genus of the Riemann 
surface obtained by the usual quotient of the upper-half plane by the group Tjj acting via linear 
fractional transformations and adding cusps). There are only finitely many congruence subgroups 
of SL2(Z) of genus or 1 [Den 75]. Hence, there exists an integer / = f{i) > 1 such that if H is 
a subgroup of GL2(Z/£-^+2z) for which Xh has genus at most 1, then H ^ {A e SL2(Z/^-^+2z) : 
A = I (mod (^)}. Apply Faltings' theorem (originally, Mordell's conjecture) to the modular curves 
Xh with groups H C GL2(Z/£^+2z) not containing {A £ SL2(Z/£-^+2z) : A = I (mod i^^)}, we 
find that there is a finite set J C Q such pEp+2{GalQ) ^ {A £ SL2{Z/ef+^Z) : A = I (mod i^)} 
for all elliptic curves E/<Q with j{E) ^ J. If E/Q satisfies j{E) J, then Lemma 2.2(v) implies 
that p£;/oc(Gal(Q/Q^y^)) ^ {A e SL2{Ze) ■.A = I (mod (since Q'^^'' is the maximal abelian 

extension of Q, PE,e°^{Gal{Q/Q'^^'^)) is the commutator subgroup of pE,e°° (Galq)). The desired e{i) 
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is chosen such that e{i) > 2/ + 2 and such that the lemma holds for the finite number of excluded 
Q-isogeny classes of non-CM elliptic curves over Q. □ 

Proof of Proposition 1.3. Define the set Q = {£ : I < 17} U {37} and let V be the (finite) set of 
primes i ^ Q for which pE/ is not surjective. Define the number field K = U^gPuq ^(-^M)' 
a Galois extension of Q. Define the group S = pEiGal{Q/ KQ^^'^)). Since detop^: Gal^ — is 
the cyclotomic character and is thus surjective, we have 

(5.1) [GL2(Z) : pEiGalQ)] = [8^(1.) : Pi,(Gal( W"'))] = ^^^_J-^[SL2(Z) : 5]. 

So it remains to bound [SL2(Z) : 5]. For each prime i, let Si be the image of S under the projection 
to SL2(Z£). We now describe the groups Si. 
Case 1: Let i he a prime in V. 

Define f{i) = ord^(Af) + 1. Since i^^^^ f M, the group Pe ifwi^slQ) is not contained in the 

normalizer of a Cartan subgroup. By Proposition 1.2, we must have pE/°°{Ga\Q) 5 I + 1^^^^^ M2{1'e) 
and hence pE/^-iGaliQ/Q^y")) contains {A G SL2(Z^) : A = I (mod ^^^W)} by Lemma 2.6. 
Therefore, 

[SL2(Z^) : Si] < (^4/(f)^3^ord,([i<':i^nQ'^y<^]) ^ ^^OTdl{M)+l^^l2^oTdi{lK■.KnQ-y-])^ 

The prime £ divides M, so [SL2{Z/Ze) : 5^] < eovd,i[K:KnQ-y-]) (^^orddM)^'^ _ 
Case 2: Let ^ be a prime in Q. 

By Lemma 5.1, there is an integer e{i) > 1, not depending on E, such that PE,e°°{Gal{'Q/'Q^-^^)) 
contains {A G SL2(Z^) ■.A = I (mod ^<=W)}. Therefore, 

[SL2(Z/Z,) : Se] < iMi)iord,i[K:KnQ^y^])_ 

Case 3: Let £ be a prime not in V U Q. 

We claim that Si = SL2(Z£). Since i is not in V, we have PE/iGaliQ) = GL2(Z/£Z). No com- 
position series of the Galois group Gal(i^/Q) contains the simple group SL2(Z/ffl)/{ib/} (this 
follows from the description of the sets "Occ(GL2(Zp))" in [Ser98, IV-25]). Therefore, the group 
PeA^^KQ/K)), and hence also H := pE,ilGal{Q/ KQ^'y'')) C SL2(Z/«), contains the group 
SL2(Z/fZ)/{ib/} in its composition series. The image of H under the quotient SL2(Z/£Z) — )■ 
SL2(Z/^Z)/{±/} is thus surjective^so H = SL2(Z/^Z) by [Ser98, IV-23 Lemma 2]. By [Scr98, IV- 
23 Lemma 3], we have Pe, (GaliQ/ KQ'^y'')) = SL2(Z£). 

Returning to the group 5, we may view 5 as a closed subgroup of Y[i Si C fl^ SL2(Zf ) = SL2(Z). 
We will show that S = Yli Si. For each finite set of primes B, let pB - S ^ Sb '■= YIi^b be the 
projection. We have pb{S) = Sb ^ov B = V U Q since the groups Si with £ £ B are pro-£ by our 
choice of K (the group pb{S) is pro-nilpotent so is a product of its Sylow subgroups). Now assume 
that is a set of primes containing V U Q for which PBiS) = Sb and fix a prime Iq ^ B. We 
claim that Pbu{£q}{S) = Sbu{£q}- Define N = PBuiioyiPiljC^)) and N' = Pbu{£o} (Pb^I)) '^'^^^ch 
are closed normal subgroups of PBu{eo}iS) that we may also view as subgroups of Sb and S^^, 
respectively. By Goursat's lemma, we find that the image of S in Sb/N x Si^/N' is the graph of an 
isomorphism Sb/N = Si^/N' of profinite groups (cf. [Rib76, §2], it is clear that the isomorphism 
and its inverse are continuous). The groups Sl^^ = SL2(Z£q) and Sb = Wi^b have no isomorphic 
non-abelian simple groups in their composition series (again see [Ser98, IV-25] and note that £- 
groups are solvable), so the isomorphism Sb/N = Si^/N' is an isomorphism of solvable groups. 
However, there are no non-trivial abelian quotients of SL2(Z£q) [Coj05, Appendix Corollary 7], so 
N = Sb and A^' = S^^. Thus PBu{eo}iS) = Sb x S^^ = Sb\j{Io} as claimed. By induction, we have 
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Pb{S) = Sb for any sets of primes B containing V U Q, and since S is profinite we deduce that 

s = UiSi. 

Returning to the index and using the three cases, we have 

[SL2(Z) : S] = Yl[SL2{Ze) ■.Se]<[K:Kn Q^^^] JJ i^"'^^^ ( H rMM)^^ 

By (5.1), we conclude that [GL2(Z) : pEiGalq)] < CM'^'^ where the constant C := UieQ ^'^"^^^ 
absolute. □ 

Theorem 1.1 is now easy. Part (i) follows immediately by combining Proposition 1.3 and Propo- 
sition 4.2. Parts (ii) and (iii) follow by combining Proposition 1.3 with Proposition 3.3(ii) and (i), 
respectively. 

Remark 5.2. Suppose that there exists an absolute constant c such that pE/iGalo) = GL2(Z/£Z) 
for all non-CM elliptic curves E over Q and primes i > c. We may assume that c is the smallest 
such constant. For each prime i < c, let e{i) be a positive integer as in Lemma 5.1. The integer 
M = UiKc^'''''^^ satisfies the condition of Proposition 1.3, so [GL2(Z) : pEiGalq)] < CM"^^ where C 
and M are absolute constants. 



6. Lang-Trotter constants 
Let E be an non-CM elliptic curve over Q. The predicted constant CE,r of Conjecture 1.5 is 

^ 2 ^. \{A£ pE,m{GalQ) -.triA) = r (mod m)}| 

<-^E,r = - lim m ■. , s. . 

vrm^oo |ps,m(CalQ)| 

where the limit is over all natural numbers m ordered by divisibility [LT76, I §4]. Serre's open 
image theorem is used to prove that this limit converges. The constant Ce^t for CM elliptic curves 
is not studied in [LT76] but can be found in [Jon09, §2.2]. To control the constants CE,r for non-CM 
5, we will need the following easy lemma. 



Lemma 6.1. Let E be a non-CM elliptic curve over Q. Then Ce,t ^ [GL2(Z) : p£;(Gal(Q)] • Cr 
where Cr is the constant of Theorem 1.6. 

Proof. We have 

2, |{^ e GL2(Z/mZ) : tr(^) = r (mod m)}| 
CE,r < -hmsup m . 

TT m^oo \pE,my<jaiQ)\ 

^ 2 GL2(Z/mZ) :tr(yl) =r (mod m)}| 

= GL2 Z) : pij GalQ • - hmsup m 

vr m^oo |GL2(Z/mZ)| 

and this last line equals [GL2(Z) : pE{Ga!iq)\ ■ Cr by the computations in [LT76, I §4] (with 
M = l). □ 

We will now prove Theorem 1.7. 

Let S{A,B) be the set of {a,b) G T{A,B) for which [GL2(Z) : pE{a,b){GalQ)] = 2 (such elliptic 
curves are called Serre curves) and define N{A, B) = J- {A, B) — 5(A, B). By [Jon09, Theorem 10] 
with /e = 1, we have 

1 V- r r I I {^o&Bfl\\ogAyi^ 
^^■^^ \HA.B)\ ^^W),.-C. + 0^-^ + -^^ 

(a,b)e<S(A,_B) 

where the implicit constant depends only on r. 
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Now fix a pair (a, 6) G M^AjB). If E(a,b) is CM, tlien we have CE{a,h),r 1 as noted in 
[Jon09, Lemma 23] (tlie key point being tliat tliere are only finitely many Q-isogeny classes of CM 
curves over Q). If E{a,b) is non-CM, tlien by Lemma 6.1 and Tlieorem l.l(i), we have 

CE{a,b),r <r ( max{l, )})'^ 

where 7 is an absolute constant. Since (a, b) G with \a\ < A and \b\ < B, we have 

HjE{a,b)) = /^([1728(4a)^-16(4a=^ + 276^)]) < log(max{A, 5}) < log(^S) 
and hence CE(a,b),r log'^(^-B). Therefore, 

' ^ ' ^' {a,6)eA^{A,B) IV) J\ 

Jones [JonlO, Theorem 4] has shown that there is an absolute constant /3 > such that 

\M{A,B)\ \ogP{mm{A,B}) 
\:F{A,B)\ ^m:in{A,B] ' 



so 



. . , log^+^(AS) 

Theorem 1.7 follows by adding (6.1) and (6.2) together, and taking 5 = max{4, /3 + 7}. 
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